PCNSE · Question #199
A Palo Alto Networks NGFW just submitted a file to WildFire for analysis. Assume a 5- minute window for analysis. The firewall is configured to check for verdicts every 5 minutes. How quickly will…
The correct answer is D. 5 to 10 minutes. The time a firewall takes to receive a WildFire verdict depends on both the maximum analysis duration and the firewall's polling frequency.
Question
A Palo Alto Networks NGFW just submitted a file to WildFire for analysis. Assume a 5- minute window for analysis. The firewall is configured to check for verdicts every 5 minutes. How quickly will the firewall receive back a verdict?
Options
- AMore than 15 minutes
- B5 minutes
- C10 to 15 minutes
- D5 to 10 minutes
How the community answered
(23 responses)- A17% (4)
- B4% (1)
- C9% (2)
- D70% (16)
Why each option
The time a firewall takes to receive a WildFire verdict depends on both the maximum analysis duration and the firewall's polling frequency.
A timeframe of more than 15 minutes is incorrect, as the longest possible wait given a 5-minute analysis window and 5-minute polling is just under 10 minutes.
5 minutes represents the minimum time if the analysis is ready by the first polling interval, but it does not account for all scenarios, especially if analysis completes just after the poll.
10 to 15 minutes is an overestimation, as the maximum wait time, accounting for both analysis and polling, should not exceed 10 minutes.
WildFire analysis takes up to 5 minutes, and the firewall checks every 5 minutes; therefore, the verdict will be received between 5 minutes (if analysis completes before or exactly at the first poll) and just under 10 minutes (if analysis finishes slightly after the first 5-minute poll and waits for the next).
Concept tested: WildFire analysis and verdict retrieval timing
Source: https://docs.paloaltonetworks.com/wildfire/10-2/wildfire-admin/wildfire-overview/wildfire-threat-detection-process
Topics
Community Discussion
No community discussion yet for this question.